$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft File: DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft (raw, json) Hash identifier: tarFq7M2m7JLlz9dnl1KPHaL9XdTQOjzPsoyk6eE+fk= Subject key identifier: 22:42:17:4D:B0:05:18:93:F6:FD:55:BB:33:BD:54:AD:1D:AA:33:64 Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D Certificate issuer: /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D Certificate serial: 2488C938F5BE8615050E6A0DED4DF61C78A61A2B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft Manifest number: F0 Signing time: Wed 04 Jun 2025 06:11:16 +0000 Manifest this update: Wed 04 Jun 2025 06:06:16 +0000 Manifest next update: Tue 10 Jun 2025 00:20:16 +0000 Files and hashes: 1: DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl (hash: wAahgYoviZnFrigB7/qog4nPWz/QvzEXEKuve4Ig3Rc=) 2: 34352e3233342e36332e302f32342d3234203d3e20323732383635.roa (hash: uzbDHsUlb67ifslgmjznrxSKQIV5sA4tgulnSHGBPto=) 3: 323830333a333732303a3a2f33322d3438203d3e20323636373636.roa (hash: OLjkSY9EQtiWlJ3rdXCCzjxZLSRb8qOBm07kFmFjg40=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:88:c9:38:f5:be:86:15:05:0e:6a:0d:ed:4d:f6:1c:78:a6:1a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D Validity Not Before: Jun 4 06:06:16 2025 GMT Not After : Jun 10 00:20:16 2025 GMT Subject: CN=2242174DB0051893F6FD55BB33BD54AD1DAA3364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:cd:e9:63:de:f9:17:13:bc:00:c2:f8:b7: 68:c3:d0:eb:96:cf:19:f8:7f:b4:5d:b9:ad:ad:27: 0f:ee:ce:3b:29:30:09:d5:e5:82:95:67:64:b0:9b: 40:37:b0:d0:c0:51:8d:93:ae:9a:0a:01:55:de:e8: 25:86:ab:ae:45:b3:65:d0:8c:0a:1b:3f:3a:72:c4: b9:d2:7d:33:05:cb:96:f2:a8:b2:49:4d:8e:4b:94: c6:61:d9:92:7b:ef:63:ff:00:de:6f:e0:37:da:31: 26:b9:e5:b9:d1:90:58:b1:f4:6c:12:ec:5a:a2:2f: 7e:15:ae:2f:2a:46:63:dd:d9:21:35:68:f1:36:f7: 20:4c:2c:bc:bf:45:1c:be:c8:90:f4:86:ca:16:31: 52:ed:dc:67:04:41:6c:1c:4f:42:37:56:1c:0f:24: 1f:40:ce:63:35:76:88:b2:93:ce:8d:62:ad:14:50: cf:d8:94:4b:41:0f:76:6c:3b:85:80:fb:e9:74:aa: f7:23:28:af:33:28:a8:d4:90:94:48:1a:28:17:38: 3a:d9:4f:11:0b:e0:38:75:27:fa:ff:3c:70:f0:ec: fd:6f:f2:d6:ff:c6:86:7e:56:e0:ba:8e:d4:78:3f: 64:9f:e5:16:3e:d6:71:45:24:23:5e:99:04:ba:db: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:17:4D:B0:05:18:93:F6:FD:55:BB:33:BD:54:AD:1D:AA:33:64 X509v3 Authority Key Identifier: keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8d:65:22:91:c7:eb:1c:f5:b1:c8:fa:df:dd:e2:55:49:af: 9e:b8:62:3c:a6:a0:88:b5:78:f8:d2:10:7b:5c:c3:67:00:58: 6a:4a:e0:50:0b:72:86:74:a3:88:7f:c1:54:ba:c8:44:18:73: ba:84:c1:13:ce:d9:78:90:8d:f8:48:7a:db:fb:69:46:f9:1c: 9b:d6:83:33:79:78:b6:0a:aa:10:75:05:ad:24:be:22:b6:a4: 04:9a:31:ab:e4:df:e0:5c:03:05:2c:15:a8:b9:5b:f4:db:8f: b6:95:f0:53:14:d7:ee:9b:9a:77:3d:47:32:d2:e3:21:bc:c8: 6b:18:b0:93:51:cb:47:a9:fe:9c:31:4a:11:79:48:6c:8b:83: 68:0e:ab:9f:ff:59:a1:3c:90:10:1c:7a:42:ff:f4:1e:ae:4e: 99:3a:f1:4b:37:5b:62:01:da:80:d6:19:57:29:78:61:c7:13: 30:84:0b:09:24:9b:13:ba:a5:ee:b7:d3:10:f8:00:82:41:45: 59:6d:92:18:af:4c:be:ea:dc:d0:84:92:0a:4c:0b:ca:d2:1f: a3:a9:66:7a:98:b0:c1:60:93:e0:cc:ab:be:56:bc:ef:08:f3: d6:b5:a2:ad:ba:7f:d0:9b:7f:5d:e9:36:a8:24:ff:b3:94:ed: 0f:26:ad:b6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJIjJOPW+hhUFDmoN7U32HHimGiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyODZBODNCRTc3QzQyQkEyRDJCQkM4RTVBNENDQUYx OTYwMjY0RDAeFw0yNTA2MDQwNjA2MTZaFw0yNTA2MTAwMDIwMTZaMDMxMTAvBgNV BAMTKDIyNDIxNzREQjAwNTE4OTNGNkZENTVCQjMzQkQ1NEFEMURBQTMzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXs3pY975FxO8AML4t2jD0OuW zxn4f7Rdua2tJw/uzjspMAnV5YKVZ2Swm0A3sNDAUY2TrpoKAVXe6CWGq65Fs2XQ jAobPzpyxLnSfTMFy5byqLJJTY5LlMZh2ZJ772P/AN5v4DfaMSa55bnRkFix9GwS 7FqiL34Vri8qRmPd2SE1aPE29yBMLLy/RRy+yJD0hsoWMVLt3GcEQWwcT0I3VhwP JB9AzmM1doiyk86NYq0UUM/YlEtBD3ZsO4WA++l0qvcjKK8zKKjUkJRIGigXODrZ TxEL4Dh1J/r/PHDw7P1v8tb/xoZ+VuC6jtR4P2Sf5RY+1nFFJCNemQS62xG5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIkIXTbAFGJP2/VW7M71UrR2qM2QwHwYDVR0j BBgwFoAU3Shqg753xCui0rvI5aTMrxlgJk0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERTQ3RERFQkQxOEM4MzQ5M0QxQTExQUVEQjU0MUE1RTMw RTE4M0RGMjRFQUNGN0YyNTRCMkU2MUEzNjM4N0EwLzAvREQyODZBODNCRTc3QzQy QkEyRDJCQkM4RTVBNENDQUYxOTYwMjY0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDI4NkE4M0JFNzdDNDJCQTJE MkJCQzhFNUE0Q0NBRjE5NjAyNjRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREU0N0RERUJEMThDODM0OTNEMUExMUFFREI1NDFBNUUzMEUxODNERjI0 RUFDRjdGMjU0QjJFNjFBMzYzODdBMC8wL0REMjg2QTgzQkU3N0M0MkJBMkQyQkJD OEU1QTRDQ0FGMTk2MDI2NEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1jWUikcfrHPWxyPrf3eJVSa+e uGI8pqCItXj40hB7XMNnAFhqSuBQC3KGdKOIf8FUushEGHO6hMETztl4kI34SHrb +2lG+Ryb1oMzeXi2CqoQdQWtJL4itqQEmjGr5N/gXAMFLBWouVv024+2lfBTFNfu m5p3PUcy0uMhvMhrGLCTUctHqf6cMUoReUhsi4NoDquf/1mhPJAQHHpC//Qerk6Z OvFLN1tiAdqA1hlXKXhhxxMwhAsJJJsTuqXut9MQ+ACCQUVZbZIYr0y+6tzQhJIK TAvK0h+jqWZ6mLDBYJPgzKu+VrzvCPPWtaKtun/Qm39d6TaoJP+zlO0PJq22 -----END CERTIFICATE-----Generated at Wed Jun 4 12:24:20 2025 by rpki-client